Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Announcement: Try the Ask AI chatbot for answers to your technical questions about Juniper products and solutions.

close
header-navigation
keyboard_arrow_up
close
keyboard_arrow_left
Junos CLI Reference
Table of Contents Expand all
list Table of Contents

syn-flood-protection-mode

date_range 20-Nov-23

Syntax

content_copy zoom_out_map
syn-flood-protection-mode (syn-cookie | syn-proxy);

Hierarchy Level

content_copy zoom_out_map
[edit security flow]

Description

Enable SYN cookie or SYN proxy defenses against SYN attacks. SYN flood protection mode is enabled globally on the device and is activated when the configured syn-flood attack-threshold value is exceeded.

Options

  • syn-cookie—Uses a cryptographic hash to generate a unique Initial Sequence Number (ISN). This is enabled by default.

  • syn-proxy—Uses a proxy to handle the SYN attack.

Required Privilege Level

security—To view this in the configuration.

security-control—To add this to the configuration.

Release Information

Statement introduced in Junos OS Release 8.5; support.

footer-navigation